Enhanced Access Control (EAC) policy can be defined at Permission level and also at an individual at the Access Control EAC object level and these can be associated to the Permission.
The EAC capability defines granular risks scores. Earlier capability included defining risk for every path (file or folder). But with the present functionality one can define the same for every operation on a given path for read, write, delete, execute, separate risk can be defined. The order of EAC policy execution is sequential. In the event of conflict, the first one takes the priority.
The Enhanced Access Control functionality includes the following four categories:
File and Directory Level Access
Application Process Control
Registry Access
Services Start/Stop Control
The earlier functionality with Command Control was limited to Linux/Unix but the present one includes support for Windows.